Subject credibility verification method and system under mandatory access control

Abstract

The embodiment of the invention provides a subject credibility verification method and system under mandatory access control. The method comprises an initialization stage and an authority auditing stage. The method specifically comprises the steps of obtaining a binary file of an application and a corresponding dynamic link library and performing measurement to obtain an initial reference value; and the authority auditing stage comprises the following steps: loading a process of an application program to a memory, measuring an ELF file of the application program in the loading process, and comparing a measurement result with an initial reference value to obtain a first comparison result; and controlling loading of the application program according to the first comparison result. Accordingto the subject credibility verification method and system. In the mandatory access control model, main body credibility verification is carried out before process loading, during loading and during running, so that credibility verification of a process loading stage is realized, the situation that a reference value is wrong due to the fact that system calling of a loading process is tampered is effectively avoided, and safety protection of a system is enhanced.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to a subject credible verification method and system under mandatory access control. Background technique [0002] In the mandatory access control model, by assigning corresponding types and sensitivity levels to subjects and objects in the system, combined with policy rules, the process of accessing objects by subjects can be controlled, and different roles can be controlled in a sufficiently fine-grained manner. The executed subject has different authority to the object, and different subjects also have different authority to the same object. But in the traditional mandatory access control model, the permission control is fine-grained enough, but it is not secure enough. [0003] A method for checking process integrity in real time is described in the prior art, including monitoring the process that is about to run in memory and judging whether the process is the first executio...

AI Technical Summary

Problems solved by technology

[0008] In view of this, the embodiment of the present invention provides a subject credible verification method and system under mandatory access control, to solve the problem that the system call of the process may be tampered with during the loading process of the application program, resulting in the occurrence of a base value error. defect

Images